Feature - 25403 - DC Agent is deployed and enforcing strong authentication policies. #711
Conversation
Manoj-Kesana
added
enhancement
|
@KManoj0000 How did you test this when |
… into Feature-25403
There was a problem hiding this comment.
Pull request overview
This pull request implements a new assessment test (ID: 25403) to validate that Microsoft Entra Private Access Sensors are deployed on domain controllers and actively enforcing strong authentication policies. The test queries the Private Access Sensors API and evaluates whether sensors are in active status and not running in audit mode.
Key changes:
- Adds PowerShell test script to check sensor deployment status and enforcement configuration
- Includes detailed report generation showing sensor statistics and problematic configurations
- Provides markdown documentation explaining security risks and remediation steps
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| src/powershell/tests/Test-Assessment.25403.ps1 | Implements the assessment test that queries Private Access Sensors via Microsoft Graph API and evaluates their status and configuration |
| src/powershell/tests/Test-Assessment.25403.md | Provides security context documentation explaining threats from weak domain controller authentication and links to remediation resources |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
@KManoj0000 |
Hi @alexandair , isAuditMode property has implemented please check below snip for reference. 
|
|
@KManoj0000 |
DC Agent is deployed and enforcing strong authentication policies.